Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F69E6A0C3C8911F0BB97727ADAE4EC9C.roa
File:                     F69E6A0C3C8911F0BB97727ADAE4EC9C.roa (raw, json)
Hash identifier:          NkiBPIYPcoFEPRzIlFBqTWZVLB9U/CJXqaZsADQCKUM=
Subject key identifier:   C6:00:64:18:75:7A:66:D5:62:05:E3:FD:2C:93:35:5F:00:63:6B:5E
Certificate issuer:       /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial:       0ACE
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F69E6A0C3C8911F0BB97727ADAE4EC9C.roa
Signing time:             Thu 29 May 2025 12:39:30 +0000
ROA not before:           Thu 29 May 2025 12:39:25 +0000
ROA not after:            Fri 29 May 2026 12:39:25 +0000
asID:                     2914
IP address blocks:        196.251.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 07 Jun 2025 00:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2766 (0xace)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
        Validity
            Not Before: May 29 12:39:25 2025 GMT
            Not After : May 29 12:39:25 2026 GMT
        Subject: CN=68385582-caed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:91:8e:45:00:60:99:56:e6:fa:dc:18:34:ac:
                    f2:e0:ed:68:71:2b:9c:98:1f:79:83:30:33:0c:da:
                    35:fd:96:7c:33:31:01:8e:c5:79:43:54:74:f6:5a:
                    ab:58:8b:9d:04:85:7e:dd:d8:79:e8:52:29:e4:16:
                    8a:3f:56:88:78:07:b4:64:2e:17:76:cd:a4:48:ff:
                    8a:b7:e1:e0:80:23:78:69:a9:7c:06:14:22:32:d7:
                    c9:64:a7:ea:cd:1e:c3:de:e4:02:cb:cb:b4:e8:04:
                    cc:e8:1e:d3:7a:67:ef:85:ef:0d:99:47:cd:f2:a7:
                    42:56:7e:7c:db:12:f1:a0:e7:ed:9c:dd:90:d5:1a:
                    f9:91:5a:dd:c8:02:c5:06:95:17:30:a7:ea:fe:56:
                    bb:46:98:d6:82:fa:c9:7d:8f:e3:65:20:95:78:ed:
                    20:4f:f9:cf:f4:f9:e8:f4:e4:fc:9f:5b:72:b4:d6:
                    e4:7b:a9:89:37:11:ff:ee:37:16:7a:fa:65:3e:a7:
                    f9:bf:01:6e:fc:2b:be:83:37:89:00:0c:ab:48:1a:
                    69:12:5c:01:a1:e3:82:39:90:30:6b:5a:59:1e:90:
                    47:0c:c6:5c:17:bc:e5:f5:7b:7f:5a:78:82:21:41:
                    d9:63:9d:39:44:18:cc:25:8b:ad:46:78:38:04:80:
                    7e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:00:64:18:75:7A:66:D5:62:05:E3:FD:2C:93:35:5F:00:63:6B:5E
            X509v3 Authority Key Identifier:
                keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/F69E6A0C3C8911F0BB97727ADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.251.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:60:69:2d:46:18:0b:a2:5d:66:8f:f9:09:62:33:fb:50:9a:
         4b:c4:66:79:71:cb:0b:07:71:bd:c1:3c:57:14:8f:d9:2a:f9:
         77:97:5d:eb:d4:1d:a6:de:f2:28:2a:af:0d:c9:40:35:60:b6:
         3a:6f:7a:53:2f:3d:3b:7d:3d:78:22:e2:1f:40:af:5c:6c:3a:
         da:46:ae:ca:56:40:8a:d0:2b:7b:e3:4c:65:75:f4:07:5c:9b:
         64:a5:f6:30:a8:60:83:9b:89:71:52:c7:48:09:7b:b4:da:c9:
         ba:06:b7:26:de:22:88:24:e0:66:3f:79:2d:84:a6:4c:62:08:
         93:0e:f8:cc:a4:3b:4a:cc:8d:ac:02:ab:53:68:99:4a:98:e8:
         0d:34:cc:a8:8c:90:37:4f:13:30:9d:d7:19:7d:93:a1:88:9b:
         5d:85:89:97:52:21:9b:cb:c5:b7:47:a1:f4:55:d6:84:99:b5:
         8d:e0:ce:20:7c:3b:24:70:f0:5b:8d:36:13:25:5c:e4:95:91:
         06:1a:f8:bc:94:4b:87:8d:19:a4:d7:66:a9:fe:5e:74:4c:83:
         ea:9d:e0:df:49:3c:c5:9a:62:42:b8:b9:d9:52:71:35:21:ca:
         01:a6:61:42:cd:da:cd:0e:28:4b:e5:ef:3b:b5:34:a0:26:a4:
         5f:24:83:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:21:01 2025 by rpki-client